Google Cloud and Google Workspace services meet demanding US government compliance requirements that are verified through formal third-party authorizations, including the following:
- Federal Risk and Authorization Management Program (FedRAMP) High provisional authorization to operate (P-ATO).
- Department of Defense (DoD) Cloud Computing Security Requirements Guide (SRG) Impact Level 2 (IL2) and Impact Level 4 (IL4) provisional authorizations (PA) issued by the Defense Information Systems Agency (DISA).
- Moreover, Google Cloud also maintains a DoD IL5 PA issued by DISA.
For more information, see the Google FedRAMP and DoD compliance offerings pages.
This document provides a detailed list of Google Cloud and Google Workspace services in scope for FedRAMP High, DoD IL2, DoD IL4, and DoD IL5 provisional authorizations. You can use all Google Cloud and Google Workspace services that are FedRAMP High authorized for FedRAMP Moderate deployments.
This document also tracks the Google Cloud regions that are suitable for FedRAMP Moderate, FedRAMP High, DoD IL2, DoD IL4, and DoD IL5 deployments.
Terminology
This document uses the following terminology:
- FedRAMP High: FedRAMP High P-ATO
- FedRAMP Moderate: FedRAMP Moderate deployment for a cloud region based on inheritance from a FedRAMP High P-ATO
- DoD IL2: DoD SRG Impact Level 2 PA
- DoD IL4: DoD SRG Impact Level 4 PA
- DoD IL5: DoD SRG Impact Level 5 PA
- GSA review: Service was submitted for FedRAMP authorization and is waiting for GSA approval
- DISA review: Service was submitted for DoD authorization and is waiting for DISA approval
- : Service or cloud region is authorized
Google Cloud services by audit scope
Last updated: January 2026
Google's authorization strategy focuses on the top-level cloud services.
A component service or feature of an authorized top-level cloud service might not be authorized yet, in which case it's explicitly excluded from the authorization scope. Conversely, a commonly used feature of an authorized cloud service might be explicitly called out as authorized for emphasis and to proactively address questions about the authorization status for commonly used Google Cloud services. You can use all Google Cloud services that are FedRAMP High authorized for FedRAMP Moderate deployments.
This document also tracks changes to authorization status resulting from service rebranding, restructuring, and deprecation. Typically, authorization status is no longer tracked for deprecated services that are shut down and unavailable for provisioning.
| Service | FedRAMP High | DoD IL2 | DoD IL4 | DoD IL5 |
|---|---|---|---|---|
| DISA review |
DISA review |
|||
| DISA review |
DISA review |
|||
| GSA review |
||||
| DISA review |
DISA review |
|||
| App Engine standard environment (excluding bundled services) |
||||
| DISA review |
DISA review |
|||
| Artifact Registry (replaced Container Registry ) |
||||
|
Service
|
FedRAMP High | DoD IL2 | DoD IL4 | DoD IL5 |
| BigQuery (excluding BigLake and BigQuery sharing ) |
||||
| DISA review |
DISA review |
|||
| DISA review |
DISA review |
|||
| DISA review |
DISA review |
|||
| DISA review |
DISA review |
|||
| Chrome Enterprise Premium (formerly BeyondCorp Enterprise) |
||||
|
Service
|
FedRAMP High | DoD IL2 | DoD IL4 | DoD IL5 |
| Cloud Deployment Manager (replaced by Infrastructure Manager ) |
||||
| Cloud Life Sciences (formerly Google Genomics) |
||||
| External Application Load Balancer (regional) |
||||
| Internal Application Load Balancer (regional) |
||||
|
Service
|
FedRAMP High | DoD IL2 | DoD IL4 | DoD IL5 |
| External proxy Network Load Balancer (regional) |
||||
| Internal proxy Network Load Balancer (regional) |
||||
| Cloud Next Generation Firewall (Cloud NGFW) (excluding Enterprise ) |
||||
|
Service
|
FedRAMP High | DoD IL2 | DoD IL4 | DoD IL5 |
| Cloud Run functions (formerly Cloud Functions) |
||||
| Knative serving (formerly Cloud Run for Anthos) |
||||
| Direct VPC egress (replaced Serverless VPC Access ) |
||||
| Cloud Service Mesh (formerly Anthos Service Mesh) |
DISA review |
DISA review |
||
| DISA review |
DISA review |
|||
|
Service
|
FedRAMP High | DoD IL2 | DoD IL4 | DoD IL5 |
| DISA review |
DISA review |
|||
| DISA review |
DISA review |
|||
| Conversational Agents (formerly Dialogflow CX) |
||||
| Customer Experience Insights (formerly CCAI Insights) |
||||
| Data Catalog (replaced by Dataplex Universal Catalog ) |
||||
| DISA review |
DISA review |
|||
|
Service
|
FedRAMP High | DoD IL2 | DoD IL4 | DoD IL5 |
| DISA review |
DISA review |
|||
| DISA review |
DISA review |
|||
| DISA review |
DISA review |
|||
| DISA review |
DISA review |
|||
| DISA review |
DISA review |
|||
| DISA review |
DISA review |
|||
|
Service
|
FedRAMP High | DoD IL2 | DoD IL4 | DoD IL5 |
| DISA review |
DISA review |
|||
| Gemini Enterprise (formerly Google Agentspace; excluding NotebookLM Enterprise; for a full list of exclusions, see Deployment guidance for Gemini for Government ) |
DISA review |
|||
| DISA review |
DISA review |
|||
| DISA review |
DISA review |
|||
|
Service
|
FedRAMP High | DoD IL2 | DoD IL4 | DoD IL5 |
| GKE Identity Service (formerly Anthos Identity Service) |
||||
| Identity-Aware Proxy (IAP) (excluding IAP for TCP ) |
||||
| DISA review |
DISA review |
|||
|
Service
|
FedRAMP High | DoD IL2 | DoD IL4 | DoD IL5 |
| DISA review |
DISA review |
|||
| DISA review |
DISA review |
|||
| Looker Studio (formerly Google Data Studio) |
||||
| Memorystore (excluding Memorystore for Redis Cluster and Memorystore for Valkey ) |
||||
| DISA review |
DISA review |
|||
|
Service
|
FedRAMP High | DoD IL2 | DoD IL4 | DoD IL5 |
| DISA review |
DISA review |
|||
| Secret Manager (excluding Global secrets ) |
||||
| Secure Source Manager (replaced Cloud Source Repositories ) |
DISA review |
DISA review |
||
| Security Command Center (excluding Enterprise) |
DISA review |
DISA review |
||
| Security Command Center Premium (excluding Compliance Manager , Data Security Posture Management , AI Protection , and Issues ) |
DISA review |
DISA review |
||
| Sensitive Data Protection (formerly Cloud DLP) |
||||
|
Service
|
FedRAMP High | DoD IL2 | DoD IL4 | DoD IL5 |
| Vertex AI Neural Architecture Search (NAS) (formerly AI Platform NAS) |
||||
| Vertex AI Workbench (formerly Notebooks) |
||||
|
Service
|
FedRAMP High | DoD IL2 | DoD IL4 | DoD IL5 |
| DISA review |
DISA review |
|||
| DISA review |
DISA review |
Google Workspace services by audit scope
Last updated: January 2026
The Google Workspace Enterprise Plus edition is included in the FedRAMP High P-ATO and maintains a DoD IL4 PA. You can use all Google Workspace services that are FedRAMP High authorized for FedRAMP Moderate deployments.
| Service | FedRAMP High | DoD IL2 | DoD IL4 | DoD IL5 |
|---|---|---|---|---|
| DISA review |
||||
| DISA review |
||||
| Admin SDK (including Admin Settings API, Apps Email Audit API, Calendar Resource API, Directory API (which replaced Provisioning API), Domain Shared Contacts API, Email Settings API, Enterprise License Manager API, Groups Migration API, Groups Settings API, Reports API, and Reseller API) |
||||
| DISA review |
||||
| Google Chrome sync (Google Workspace for Education domains only) |
||||
|
Service
|
FedRAMP High | DoD IL2 | DoD IL4 | DoD IL5 |
| DISA review |
||||
| DISA review |
||||
| DISA review |
||||
| DISA review |
||||
| Google Sites Classic (replaced by Google Sites New) |
||||
| DISA review |
||||
| DISA review |
||||
|
Service
|
FedRAMP High | DoD IL2 | DoD IL4 | DoD IL5 |
| Google Workspace Security Center (for Google Workspace Enterprise and Google Workspace Enterprise for Education domains only) |
||||
| Generative images in Meet backgrounds |
||||
| Live translated captions |
||||
| Studio look |
||||
Authorized Google Cloud regions
Last updated: January 2026
Google Cloud regions hold FedRAMP and Department of Defense (DoD) provisional authorizations (PAs). The suitability of these regions depends on the following security impact levels (IL):
- For an IL2 PA, DoD grants full reciprocity with a FedRAMP Moderate or High P-ATO.
- Only US-based cloud regions are appropriate for FedRAMP High, DoD IL2, DoD IL4, and DoD IL5 deployments.
- You can use any US-based cloud region that's approved for FedRAMP High for FedRAMP Moderate deployments.
- Non-US cloud regions are only suitable for FedRAMP Moderate deployments, which can rely on the FedRAMP High P-ATO.
| Geographic area | Location | Cloud region | FedRAMP Moderate | FedRAMP High | DoD IL2 | DoD IL4 | DoD IL5 |
|---|---|---|---|---|---|---|---|
| North America |
Arcola, VA, USA |
|
|||||
| |
Ashburn (1), VA, USA |
|
|||||
| |
Ashburn (2), VA, USA |
|
|||||
| |
Ashburn (3), VA, USA |
|
|||||
| |
Atlanta (1), GA, USA |
Not applicable (N/A) |
|||||
| |
Atlanta (2), GA, USA |
N/A |
|||||
| |
Clarksville, TN, USA |
|
|||||
| |
Columbus, OH, USA |
|
|||||
| |
Council Bluffs (1), IA, USA |
|
|||||
| |
Council Bluffs (2), IA, USA |
|
|||||
| |
Henderson, NV, USA |
|
|||||
| |
Las Vegas, NV, USA |
|
|||||
|
Geographic area
|
Location | Cloud region | FedRAMP Moderate | FedRAMP High | DoD IL2 | DoD IL4 | DoD IL5 |
| |
Lancaster, OH, USA |
|
|||||
| |
Leesburg, VA, USA |
N/A |
|||||
| |
Lenoir, NC, USA |
N/A |
|||||
| |
Los Angeles (1), CA, USA |
|
|||||
| |
Los Angeles (2), CA, USA |
|
|||||
| |
Los Angeles (3), CA, USA |
|
|||||
| |
Midlothian (Dallas), TX, USA |
|
|||||
| |
Moncks Corner, SC, USA |
|
|||||
| |
Montreal, Québec, Canada |
|
|||||
| |
New Albany, OH, USA |
|
|||||
| |
Papillion, NE, USA |
|
|||||
| |
Phoenix, AZ, USA |
|
|||||
|
Geographic area
|
Location | Cloud region | FedRAMP Moderate | FedRAMP High | DoD IL2 | DoD IL4 | DoD IL5 |
| |
Pryor Creek, OK, USA |
|
|||||
| |
Reno, NV, USA |
N/A |
|||||
| |
Salt Lake City (1), UT, USA |
|
|||||
| |
Salt Lake City (2), UT, USA |
|
|||||
| |
Salt Lake City (3), UT, USA |
|
|||||
| |
The Dalles (1), OR, USA |
|
|||||
| |
The Dalles (2), OR, USA |
|
|||||
| |
Toronto, Ontario, Canada |
|
|||||
| |
Widows Creek, AL, USA |
N/A |
|||||
| South America |
Osasco, São Paulo, Brazil |
|
|||||
| |
Vinhedo, São Paulo, Brazil |
|
|||||
| |
Quilicura, Santiago, Chile |
|
|||||
|
Geographic area
|
Location | Cloud region | FedRAMP Moderate | FedRAMP High | DoD IL2 | DoD IL4 | DoD IL5 |
| Europe |
Eemshaven, Netherlands |
|
|||||
| |
Frankfurt (1), Hesse, Germany |
|
|||||
| |
Frankfurt (2), Hesse, Germany |
|
|||||
| |
Frankfurt (3), Hesse, Germany |
|
|||||
| |
Frankfurt (4), Hesse, Germany |
|
|||||
| |
Frankfurt (5), Hesse, Germany |
|
|||||
| |
Frankfurt (6), Hesse, Germany |
|
|||||
| |
Frankfurt (7), Hesse, Germany |
|
|||||
| |
Fredericia, Denmark |
N/A |
|||||
| |
Ghlin, Hainaut, Belgium |
|
|||||
| |
Hamina, Finland |
|
|||||
| |
London (1), United Kingdom |
|
|||||
|
Geographic area
|
Location | Cloud region | FedRAMP Moderate | FedRAMP High | DoD IL2 | DoD IL4 | DoD IL5 |
| |
London (2), United Kingdom |
|
|||||
| |
London (3), United Kingdom |
|
|||||
| |
London (4), United Kingdom |
|
|||||
| |
London (5), United Kingdom |
|
|||||
| |
London (6), United Kingdom |
|
|||||
| |
Madrid (1), Spain |
|
|||||
| |
Madrid (2), Spain |
|
|||||
| |
Middenmeer, Netherlands |
|
|||||
| |
Milan (1), Italy |
|
|||||
| |
Milan (2), Italy |
|
|||||
| |
Paris (1), France |
|
|||||
| |
Paris (2), France |
|
|||||
|
Geographic area
|
Location | Cloud region | FedRAMP Moderate | FedRAMP High | DoD IL2 | DoD IL4 | DoD IL5 |
| |
Paris (3), France |
|
|||||
| |
Warsaw (1), Poland |
|
|||||
| |
Warsaw (2), Poland |
|
|||||
| |
Zurich, Switzerland |
|
|||||
| Middle East |
Doha (1), Qatar |
|
|||||
| |
Tel Aviv (1), Israel |
|
|||||
| |
Tel Aviv (2), Israel |
|
|||||
| Asia Pacific |
Changhua, Taiwan |
|
|||||
| |
Delhi (1), India |
|
|||||
| |
Jakarta (1), Indonesia |
|
|||||
| |
Jakarta (2), Indonesia |
|
|||||
| |
Kōtō-ku (1), Tokyo, Japan |
|
|||||
|
Geographic area
|
Location | Cloud region | FedRAMP Moderate | FedRAMP High | DoD IL2 | DoD IL4 | DoD IL5 |
| |
Kōtō-ku (2), Tokyo, Japan |
|
|||||
| |
Kōtō-ku (3), Tokyo, Japan |
|
|||||
| |
Lok Yang Way, Singapore |
|
|||||
| |
Melbourne, Victoria, Australia |
|
|||||
| |
Mumbai (1), India |
|
|||||
| |
Mumbai (2), India |
|
|||||
| |
Mumbai (3), India |
|
|||||
| |
Osaka, Japan |
|
|||||
| |
Seoul, South Korea |
|
|||||
| |
Sydney (1), NSW, Australia |
|
|||||
| |
Sydney (2), NSW, Australia |
|
|||||
| |
Sydney (3), NSW, Australia |
|
|||||
| |
Sydney (4), NSW, Australia |
|
|||||
| |
Wenya, Singapore |
|
